$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft File: NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft (raw, json) Hash identifier: tzElvW9B+QgS2cBSGJdRUvrZwyOXdN4KYEr7SZizlU8= Subject key identifier: 32:81:DE:4A:23:D7:BB:B1:9E:35:72:DC:A1:5C:A4:34:4D:87:7F:4C Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Certificate serial: 11B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft Manifest number: 1183 Signing time: Mon 12 May 2025 17:11:13 +0000 Manifest this update: Mon 12 May 2025 17:11:12 +0000 Manifest next update: Mon 19 May 2025 17:11:12 +0000 Files and hashes: 1: NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl (hash: RusY/71Gt33+UkH08B1je0rhWBui07A3drPsywrJv0Q=) 2: 7F7F1470091D11F0B7E95627C4F9AE02.roa (hash: hpmM9pfcrUFnNRets4Cm3b/cVvffA5StG3HyqAHQxOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4530 (0x11b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Validity Not Before: May 12 17:11:12 2025 GMT Not After : May 19 17:11:12 2025 GMT Subject: CN=68222bb0-47d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:17:eb:ee:d2:94:15:9f:18:c0:21:ef:fb: 5f:67:9d:05:09:37:78:14:9f:07:7b:bb:7b:7a:ba: 16:5f:23:be:5f:d4:f7:a8:68:79:ca:51:06:a1:96: d6:09:45:10:f9:a6:2c:bd:6c:f3:3d:5c:f1:d4:27: 46:71:17:d1:93:60:74:1a:f0:9e:b7:56:ce:c2:9d: d6:74:a7:f2:aa:d7:0c:1c:61:2c:c9:fd:c2:b7:5f: 49:cb:2f:87:96:3c:cb:60:5d:cc:25:f6:d9:b0:aa: df:f3:b8:8e:14:c5:bf:94:97:72:39:03:8e:de:25: c3:c0:dd:1b:18:3c:d1:a0:17:99:26:36:d3:7a:f1: f9:f5:e8:11:cc:8f:dc:5b:6b:24:ba:7b:4e:4e:9f: d7:68:75:6c:c6:0c:9c:85:99:ce:49:87:f5:01:5c: 29:b8:df:e9:7f:5d:3f:b6:2e:57:c2:cc:00:83:5e: b7:cf:db:e0:1d:87:ae:81:23:77:67:72:87:f4:06: ab:d1:b0:d4:df:92:bd:03:75:c4:c4:37:c1:46:8d: fb:60:62:aa:94:a0:94:9b:5b:05:e6:23:54:6d:89: 62:7c:46:f8:9a:fb:f1:79:ae:1e:6b:bc:df:28:ef: 47:3e:60:a6:c8:54:fb:e4:2c:73:83:d1:b0:50:cb: c7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:81:DE:4A:23:D7:BB:B1:9E:35:72:DC:A1:5C:A4:34:4D:87:7F:4C X509v3 Authority Key Identifier: keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:0a:8b:8c:15:ce:a2:17:d2:cd:19:a5:62:a7:f4:f9:a7:74: fd:6a:88:a0:81:83:06:a6:56:22:25:31:20:46:01:ac:20:34: 40:d7:82:23:1e:1a:c8:64:44:b6:78:66:b7:8d:4f:a7:ba:04: 8c:e4:9d:79:9a:75:b4:84:53:fc:19:ec:66:87:2d:83:5e:cf: b0:c9:70:01:60:11:23:01:a4:d9:4e:9a:3b:12:e0:69:57:ea: 3d:25:e6:58:85:71:0a:48:8e:65:ca:d7:aa:38:2f:f4:a0:df: 9a:c2:ff:79:42:05:9c:aa:51:9b:b7:a1:b9:97:8e:1d:97:b8: bf:9e:11:9e:27:33:34:47:69:42:a7:64:31:df:05:42:95:77: e2:aa:fe:10:6d:0f:34:a7:d3:b4:cd:b8:e3:93:ba:04:bc:d7: af:ec:a8:2b:d5:26:55:b4:f1:b7:84:17:26:4e:b6:d8:6b:e0: a0:17:87:e5:2d:24:92:7a:28:2d:f4:4f:23:e9:3b:c1:df:44: 7c:26:52:93:d3:3b:25:f7:38:dc:81:22:d0:1a:c3:3a:75:6c: 91:e8:1f:29:2b:39:7d:3c:76:52:d4:02:41:8c:59:fe:7c:3c: 67:e0:51:99:e1:91:2a:32:5d:e0:fe:4f:63:a2:68:d9:ab:4e: 3c:c3:36:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDM3MTI3M0NGRDhDMkM5MDhCNjkxRDZCRUExNzVFOERF ODJCRDQzOUEwHhcNMjUwNTEyMTcxMTEyWhcNMjUwNTE5MTcxMTEyWjAYMRYwFAYD VQQDEw02ODIyMmJiMC00N2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKIX6+7SlBWfGMAh7/tfZ50FCTd4FJ8He7t7eroWXyO+X9T3qGh5ylEGoZbW CUUQ+aYsvWzzPVzx1CdGcRfRk2B0GvCet1bOwp3WdKfyqtcMHGEsyf3Ct19Jyy+H ljzLYF3MJfbZsKrf87iOFMW/lJdyOQOO3iXDwN0bGDzRoBeZJjbTevH59egRzI/c W2skuntOTp/XaHVsxgychZnOSYf1AVwpuN/pf10/ti5XwswAg163z9vgHYeugSN3 Z3KH9Aar0bDU35K9A3XExDfBRo37YGKqlKCUm1sF5iNUbYlifEb4mvvxea4ea7zf KO9HPmCmyFT75Cxzg9GwUMvHZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKB3koj 17uxnjVy3KFcpDRNh39MMB8GA1UdIwQYMBaAFDcSc8/YwskItpHWvqF16N6CvUOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DRUUzRDcxODA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lRaTJrZGEtb1hYbzNvSzlR NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054Snp6OWpDeVFpMmtkYS1vWFhvM29LOVE1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DRUUzRDcxODA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lR aTJrZGEtb1hYbzNvSzlRNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOCouMFc6iF9LNGaVip/T5p3T9aoiggYMGplYiJTEgRgGsIDRA14Ij HhrIZES2eGa3jU+nugSM5J15mnW0hFP8Gexmhy2DXs+wyXABYBEjAaTZTpo7EuBp V+o9JeZYhXEKSI5lyteqOC/0oN+awv95QgWcqlGbt6G5l44dl7i/nhGeJzM0R2lC p2Qx3wVClXfiqv4QbQ80p9O0zbjjk7oEvNev7Kgr1SZVtPG3hBcmTrbYa+CgF4fl LSSSeigt9E8j6TvB30R8JlKT0zsl9zjcgSLQGsM6dWyR6B8pKzl9PHZS1AJBjFn+ fDxn4FGZ4ZEqMl3g/k9jomjZq048wzYr -----END CERTIFICATE-----Generated at Tue May 13 18:39:35 2025 by rpki-client